Gluu Server Community Edition
Gluu Server Community Edition (CE) is an open-source identity and access management (IAM) platform providing standards-based SSO using OpenID Connect, OAuth 2.0, and SAML 2.0. It can act as both an Identity Provider (IdP) and Authorization Server, supporting MFA, federation, and SCIM-based provisioning. In 2022, Gluu introduced the Gluu Flex commercial line; CE remains the last fully open-source Gluu distribution.
Key Capabilities
-
Open standards foundation: Implements OAuth 2.0, OpenID Connect, and SAML 2.0 (via oxAuth and oxShibboleth). Supports authorization code, implicit, hybrid, and device flows.
-
Identity provider & federation: Can serve as an IdP or SP, bridging to external identity sources through SAML or LDAP.
-
Multi-factor authentication: Pluggable MFA with support for OTP, Duo, FIDO2/WebAuthn, and adaptive rules.
-
SCIM provisioning: Includes a SCIM 2.0 API for user and group lifecycle management.
-
Flexible deployment: Supports traditional packages, Docker containers, and Kubernetes with official Helm charts for Gluu 4.x.
Limitations
-
Lifecycle status: Gluu CE is community-maintained; active development moved to Gluu Flex, a commercial successor built on similar components.
-
Operational complexity: Self-hosted and modular; requires managing multiple services (LDAP, oxAuth, oxTrust, oxShibboleth, SCIM) and certificates.
-
Documentation variability: CE docs persist online but may lag behind newer Flex versions; check the Gluu 4.x CE branch for compatibility.
-
No vendor support: Community Edition is supported via forums and GitHub issues only—commercial SLAs require Flex.